{"id":67935,"name":"download","description":"A quick helper module to download files online.","url":"https://github.com/choldgraf/download","last_synced_at":"2025-09-08T14:01:45.466Z","repository":{"id":44748151,"uuid":"92094043","full_name":"choldgraf/download","owner":"choldgraf","description":"A quick helper module to download files online.","archived":false,"fork":false,"pushed_at":"2022-01-27T06:28:47.000Z","size":1309,"stargazers_count":48,"open_issues_count":12,"forks_count":16,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-09-01T17:17:56.227Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/choldgraf.png","metadata":{"files":{"readme":"README.rst","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-05-22T19:57:19.000Z","updated_at":"2024-10-26T03:35:56.000Z","dependencies_parsed_at":"2022-08-27T22:30:33.698Z","dependency_job_id":null,"html_url":"https://github.com/choldgraf/download","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/choldgraf/download","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/choldgraf","download_url":"https://codeload.github.com/choldgraf/download/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/sbom","scorecard":{"id":278660,"data":{"date":"2025-08-11","repo":{"name":"github.com/choldgraf/download","commit":"909b0555df30a2bc6953287b487640e547fda748"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.1,"checks":[{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/artifacts.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:22","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:23","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:55","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/artifacts.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":4,"reason":"Found 7/16 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":2,"reason":"8 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2018-34 / GHSA-2fc2-6r4j-p65h","Warn: Project is vulnerable to: PYSEC-2021-856 / GHSA-5545-2q6w-2gh6","Warn: Project is vulnerable to: PYSEC-2019-108 / GHSA-9fq2-x9r6-wfmf","Warn: Project is vulnerable to: PYSEC-2018-33 / GHSA-cw6w-4rcx-xphc","Warn: Project is vulnerable to: PYSEC-2021-857 / GHSA-f7c7-j99h-c22f","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2017-1 / GHSA-frgw-fgh6-9g52","Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 23 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T15:10:13.097Z","repository_id":44748151,"created_at":"2025-08-17T15:10:13.097Z","updated_at":"2025-08-17T15:10:13.097Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274196112,"owners_count":25239148,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-08T02:00:09.813Z","response_time":121,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"choldgraf","name":"Chris Holdgraf","uuid":"1839645","kind":"user","description":"I work with Project Jupyter and other open communities to build tools and solve problems for scientific research and education.","email":"","website":"chrisholdgraf.com","location":"California","twitter":"choldgraf","company":"UC Berkeley","icon_url":"https://avatars.githubusercontent.com/u/1839645?u=0cb8e928e6acf042911766f7fa533f9dfb693ecc\u0026v=4","repositories_count":52,"last_synced_at":"2023-03-25T11:42:47.521Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/choldgraf","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-03T23:32:27.640Z","updated_at":"2023-03-25T11:42:48.063Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/choldgraf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/choldgraf/repositories"},"packages":[{"id":2714801,"name":"download","ecosystem":"pypi","description":"A quick module to help downloading files using python.","homepage":"https://github.com/choldgraf/download","licenses":"BSD (3-clause)","normalized_licenses":["BSD-1-Clause"],"repository_url":"https://github.com/choldgraf/download","keywords_array":[],"namespace":null,"versions_count":9,"first_release_published_at":"2017-05-22T20:28:53.000Z","latest_release_published_at":"2020-04-23T22:02:44.000Z","latest_release_number":"0.3.5","last_synced_at":"2025-09-01T16:33:35.502Z","created_at":"2022-04-10T10:48:13.262Z","updated_at":"2025-09-01T17:10:59.535Z","registry_url":"https://pypi.org/project/download/","install_command":"pip install download --index-url https://pypi.org/simple","documentation_url":"https://download.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Intended Audience :: Developers","Intended Audience :: Science/Research","License :: OSI Approved","Programming Language :: Python","Topic :: Scientific/Engineering","Topic :: Software Development"],"normalized_name":"download","project_status":null},"repo_metadata":{"id":44748151,"uuid":"92094043","full_name":"choldgraf/download","owner":"choldgraf","description":"A quick helper module to download files online.","archived":false,"fork":false,"pushed_at":"2022-01-27T06:28:47.000Z","size":1309,"stargazers_count":48,"open_issues_count":12,"forks_count":16,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-07-23T10:30:59.428Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/choldgraf.png","metadata":{"files":{"readme":"README.rst","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-05-22T19:57:19.000Z","updated_at":"2024-10-26T03:35:56.000Z","dependencies_parsed_at":"2022-08-27T22:30:33.698Z","dependency_job_id":null,"html_url":"https://github.com/choldgraf/download","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/choldgraf/download","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/choldgraf","download_url":"https://codeload.github.com/choldgraf/download/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/sbom","scorecard":{"id":278660,"data":{"date":"2025-08-11","repo":{"name":"github.com/choldgraf/download","commit":"909b0555df30a2bc6953287b487640e547fda748"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.1,"checks":[{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/artifacts.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/choldgraf/download/tests.yml/master?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:22","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:23","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:55","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/artifacts.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":4,"reason":"Found 7/16 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":2,"reason":"8 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2018-34 / GHSA-2fc2-6r4j-p65h","Warn: Project is vulnerable to: PYSEC-2021-856 / GHSA-5545-2q6w-2gh6","Warn: Project is vulnerable to: PYSEC-2019-108 / GHSA-9fq2-x9r6-wfmf","Warn: Project is vulnerable to: PYSEC-2018-33 / GHSA-cw6w-4rcx-xphc","Warn: Project is vulnerable to: PYSEC-2021-857 / GHSA-f7c7-j99h-c22f","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2017-1 / GHSA-frgw-fgh6-9g52","Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 23 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T15:10:13.097Z","repository_id":44748151,"created_at":"2025-08-17T15:10:13.097Z","updated_at":"2025-08-17T15:10:13.097Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273159599,"owners_count":25055864,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"choldgraf","name":"Chris Holdgraf","uuid":"1839645","kind":"user","description":"I work with Project Jupyter and other open communities to build tools and solve problems for scientific research and education.","email":"","website":"chrisholdgraf.com","location":"California","twitter":"choldgraf","company":"UC Berkeley","icon_url":"https://avatars.githubusercontent.com/u/1839645?u=0cb8e928e6acf042911766f7fa533f9dfb693ecc\u0026v=4","repositories_count":52,"last_synced_at":"2023-03-25T11:42:47.521Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/choldgraf","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-03T23:32:27.640Z","updated_at":"2023-03-25T11:42:48.063Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/choldgraf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/choldgraf/repositories"},"tags":[{"name":"v0.3.5","sha":"3e14e7ec55770fc82cf80468ec08e7a512d83fa9","kind":"commit","published_at":"2020-04-23T22:00:07.000Z","download_url":"https://codeload.github.com/choldgraf/download/tar.gz/v0.3.5","html_url":"https://github.com/choldgraf/download/releases/tag/v0.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/choldgraf/download@v0.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/tags/v0.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/tags/v0.3.5/manifests"},{"name":"v0.3.1","sha":"cf019d0a6569635504b891b70a83ac02e36e9656","kind":"commit","published_at":"2017-07-01T17:28:36.000Z","download_url":"https://codeload.github.com/choldgraf/download/tar.gz/v0.3.1","html_url":"https://github.com/choldgraf/download/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/choldgraf/download@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/tags/v0.3.1/manifests"}]},"repo_metadata_updated_at":"2025-09-01T17:10:59.535Z","dependent_packages_count":20,"downloads":84635,"downloads_period":"last-month","dependent_repos_count":95,"rankings":{"downloads":3.469323724317592,"dependent_repos_count":1.5276190403745549,"dependent_packages_count":0.7492168316059564,"stargazers_count":9.718502738892271,"forks_count":8.893448624060822,"docker_downloads_count":2.5989978988201066,"average":4.4928514763452165},"purl":"pkg:pypi/download","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/download","docker_dependents_count":1,"docker_downloads_count":163,"usage_url":"https://repos.ecosyste.ms/usage/pypi/download","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/download/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-07-23T10:17:00.186Z","issues_count":24,"pull_requests_count":27,"avg_time_to_close_issue":3861692.0,"avg_time_to_close_pull_request":1333661.6923076923,"issues_closed_count":13,"pull_requests_closed_count":26,"pull_request_authors_count":7,"issue_authors_count":12,"avg_comments_per_issue":1.2916666666666667,"avg_comments_per_pull_request":1.962962962962963,"merged_pull_requests_count":23,"bot_issues_count":1,"bot_pull_requests_count":0,"past_year_issues_count":3,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":3592507.3333333335,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/issues","maintainers":[{"login":"choldgraf","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/choldgraf"}],"active_maintainers":[{"login":"choldgraf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/choldgraf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/download/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/download/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/download/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/download/related_packages","maintainers":[{"uuid":"choldgraf","login":"choldgraf","name":null,"email":null,"url":null,"packages_count":33,"html_url":"https://pypi.org/user/choldgraf/","role":null,"created_at":"2023-02-24T02:39:23.309Z","updated_at":"2023-02-24T02:39:23.309Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/choldgraf/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":726150,"maintainers_count":308801,"namespaces_count":0,"keywords_count":238245,"github":"pypi","metadata":{"funded_packages_count":50579},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-09-08T05:32:36.857Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":5296696,"name":"download","ecosystem":"conda","description":null,"homepage":"https://github.com/choldgraf/download","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/choldgraf/download","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2022-03-09T18:13:21.000Z","latest_release_published_at":"2022-03-09T18:13:21.000Z","latest_release_number":"0.3.5","last_synced_at":"2025-08-21T08:05:42.106Z","created_at":"2022-10-03T16:01:06.671Z","updated_at":"2025-08-21T08:05:42.106Z","registry_url":"https://anaconda.org/conda-forge/download","install_command":"conda install -c conda-forge download","documentation_url":null,"metadata":{},"repo_metadata":{"uuid":"92094043","full_name":"choldgraf/download","owner":"choldgraf","description":"A quick helper module to download files online.","archived":false,"fork":false,"pushed_at":"2022-01-27T06:28:47.000Z","size":1309,"stargazers_count":44,"open_issues_count":12,"forks_count":18,"subscribers_count":2,"default_branch":"master","last_synced_at":"2023-03-21T10:46:44.227Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"logo_url":null,"metadata":{"files":{"readme":"README.rst","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-05-22T19:57:19.000Z","updated_at":"2023-01-28T12:12:17.000Z","dependencies_parsed_at":"2022-08-27T22:30:33.698Z","dependency_job_id":null,"html_url":"https://github.com/choldgraf/download","commit_stats":null,"repository_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload","tags_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/tags","manifests_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/manifests","owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/choldgraf","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":108921946,"host_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names"},"owner_record":{"login":"choldgraf","name":"Chris Holdgraf","uuid":"1839645","kind":"user","description":"I work with Project Jupyter and other open communities to build tools and solve problems for scientific research and education.","email":"","website":"chrisholdgraf.com","location":"California","twitter":"choldgraf","company":"UC Berkeley","avatar_url":"https://avatars.githubusercontent.com/u/1839645?u=0cb8e928e6acf042911766f7fa533f9dfb693ecc\u0026v=4","repositories_count":37,"last_synced_at":"2023-02-16T16:50:34.114Z","metadata":{"has_sponsors_listing":false},"owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/choldgraf"},"tags":[{"name":"v0.3.5","sha":"3e14e7ec55770fc82cf80468ec08e7a512d83fa9","kind":"commit","published_at":"2020-04-23T22:00:07.000Z","download_url":"https://codeload.github.com/choldgraf/download/tar.gz/v0.3.5","html_url":"https://github.com/choldgraf/download/releases/tag/v0.3.5"},{"name":"v0.3.1","sha":"cf019d0a6569635504b891b70a83ac02e36e9656","kind":"commit","published_at":"2017-07-01T17:28:36.000Z","download_url":"https://codeload.github.com/choldgraf/download/tar.gz/v0.3.1","html_url":"https://github.com/choldgraf/download/releases/tag/v0.3.1"}]},"repo_metadata_updated_at":"2023-03-22T07:27:37.831Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.025455452957324,"dependent_packages_count":19.505864736710755,"stargazers_count":37.723983029698026,"forks_count":34.734215123533815,"average":31.49737958572498},"purl":"pkg:conda/download","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/download","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/download","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/download/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2023-08-09T04:14:43.996Z","issues_count":21,"pull_requests_count":27,"avg_time_to_close_issue":3942447.4,"avg_time_to_close_pull_request":1333661.6923076923,"issues_closed_count":10,"pull_requests_closed_count":26,"pull_request_authors_count":7,"issue_authors_count":11,"avg_comments_per_issue":1.4761904761904763,"avg_comments_per_pull_request":1.962962962962963,"merged_pull_requests_count":23,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/download/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/download/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/download/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/download/related_packages","maintainers":[],"registry":{"name":"conda-forge.org","url":"https://conda-forge.org","ecosystem":"conda","default":false,"packages_count":20636,"maintainers_count":0,"namespaces_count":0,"keywords_count":13414,"github":"conda-forge","metadata":{"kind":"conda-forge","key":"CondaForge","api":"https://conda.anaconda.org","funded_packages_count":2190},"icon_url":"https://github.com/conda-forge.png","created_at":"2022-10-03T15:37:08.743Z","updated_at":"2025-09-08T06:53:21.618Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/namespaces"}}],"commits":{"id":31168,"full_name":"choldgraf/download","default_branch":"master","committers":[{"name":"Chris Holdgraf","email":"choldgraf@berkeley.edu","count":34},{"name":"Chris Holdgraf","email":"choldgraf@gmail.com","count":15},{"name":"Nikolay Korolev","email":"CrafterKolyan@mail.ru","count":11},{"name":"DanielDevBR","email":"dados.linux@gmail.com","count":8},{"name":"Niels Vadot","email":"40442285+ninivert@users.noreply.github.com","count":3},{"name":"DanielDevBR","email":"ferion11@gmail.com","count":1},{"name":"Jean-Baptiste SCHIRATTI","email":"jean.baptiste.schiratti@gmail.com","count":1}],"total_commits":73,"total_committers":7,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":10.428571428571429,"dds":0.5342465753424658,"past_year_committers":[],"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":null,"past_year_total_bot_committers":null,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2023-10-25T14:01:35.718Z","last_synced_commit":"909b0555df30a2bc6953287b487640e547fda748","created_at":"2023-03-07T16:45:35.693Z","updated_at":"2023-10-25T14:01:35.719Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-08T00:00:16.827Z","repositories_count":5483987,"commits_count":854371652,"contributors_count":31146699,"owners_count":908917,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"choldgraf/download","html_url":"https://github.com/choldgraf/download","last_synced_at":"2025-07-23T10:17:00.186Z","status":"error","issues_count":24,"pull_requests_count":27,"avg_time_to_close_issue":3861692.0,"avg_time_to_close_pull_request":1333661.6923076923,"issues_closed_count":13,"pull_requests_closed_count":26,"pull_request_authors_count":7,"issue_authors_count":12,"avg_comments_per_issue":1.2916666666666667,"avg_comments_per_pull_request":1.962962962962963,"merged_pull_requests_count":23,"bot_issues_count":1,"bot_pull_requests_count":0,"past_year_issues_count":3,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":3592507.3333333335,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-10T21:29:14.790Z","updated_at":"2025-09-02T22:09:03.989Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/choldgraf%2Fdownload/issues","issue_labels_count":{"enhancement":1},"pull_request_labels_count":{},"issue_author_associations_count":{"NONE":12,"CONTRIBUTOR":9,"OWNER":3},"pull_request_author_associations_count":{"CONTRIBUTOR":13,"OWNER":12,"NONE":2},"issue_authors":{"CrafterKolyan":6,"jasonyun":4,"choldgraf":3,"eseiver":3,"jbschiratti":1,"linear[bot]":1,"ferion11":1,"poke1024":1,"brycefisher":1,"ninivert":1,"codeskyblue":1,"konhi":1},"pull_request_authors":{"choldgraf":12,"CrafterKolyan":8,"ferion11":3,"jbschiratti":1,"brycefisher":1,"leouieda":1,"ninivert":1},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-05T00:00:10.444Z","repositories_count":10083752,"issues_count":31254324,"pull_requests_count":96222393,"authors_count":10694625,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{},"past_year_pull_request_labels_count":{},"past_year_issue_author_associations_count":{"OWNER":2,"NONE":1},"past_year_pull_request_author_associations_count":{},"past_year_issue_authors":{"choldgraf":2,"linear[bot]":1},"past_year_pull_request_authors":{},"maintainers":[{"login":"choldgraf","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/choldgraf"}],"active_maintainers":[{"login":"choldgraf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/choldgraf"}]},"events":{"total":{"IssuesEvent":3,"WatchEvent":1},"last_year":{"IssuesEvent":3,"WatchEvent":1}},"keywords":[],"dependencies":[{"ecosystem":"pypi","filepath":"examples/example_requirements.txt","sha":null,"kind":"manifest","created_at":"2022-08-27T22:30:33.151Z","updated_at":"2022-08-27T22:30:33.151Z","repository_link":"https://github.com/choldgraf/download/blob/master/examples/example_requirements.txt","dependencies":[{"id":2970508109,"package_name":"matplotlib","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":2970508110,"package_name":"pandas","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":2970508111,"package_name":"numpy","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"setup.py","sha":null,"kind":"manifest","created_at":"2022-08-27T22:30:33.352Z","updated_at":"2022-08-27T22:30:33.352Z","repository_link":"https://github.com/choldgraf/download/blob/master/setup.py","dependencies":[{"id":2970511650,"package_name":"tqdm","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]}],"score":17.389684299103646,"created_at":"2025-09-08T11:18:51.870Z","updated_at":"2025-10-07T08:25:28.263Z","avatar_url":"https://github.com/choldgraf.png","language":"Python","category":null,"sub_category":null,"monthly_downloads":84635,"funding_links":[],"readme_doi_urls":[],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":[],"project_url":"https://science.ecosyste.ms/api/v1/projects/67935","html_url":"https://science.ecosyste.ms/projects/67935"}